CVE-2026-126247

Name of the Vulnerable Software and Affected Versions FortiAuthenticator versions 8.0.0 through 8.0.3 FortiAuthenticator versions 6.6.0 through 6.6.10

Description An authenticated privileged attacker can execute unauthorized code or commands via HTTP requests due to a format string vulnerability, which occurs when the software uses externally-controlled input to format a string without proper validation.

Recommendations Update FortiAuthenticator versions 8.0.0 through 8.0.3 to a newer version. Update FortiAuthenticator versions 6.6.0 through 6.6.10 to a newer version.